Hi,
the initial situation is the following: I have an all-in-one instance, that simultaneously takes on the role of the DS, and a UF that sends its data to the AiO. The required stanzas were distributed as a separate app, in addition to the Linux TA via the DS. Scripted inputs from the TA like "vmstat.sh" or "netstat.sh" can be browsed on the AiO and work so far. In the next step I wanted to activate the "cpu_metric.sh" stanza and proceeded like this: 1. I created a metric index on the AiO, called "linux_metrics". 2. I configured the inputs.conf under the "deployment-apps" on the AiO and enabled the stanza. This config was pushed to the UF, or rather it was pulled by the UF. Config: [script:///opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/cpu_metric.sh] interval = 30 disabled = 0 index = linux_metrics Unfortunately, however, no data ran into my metric index. "For fun" I tried the same procedure for other metric stanzas, which then immediately passed their data to the dedicated indexer. Standard solutions, like installing sysstat, have already been tried. Maybe one of you can think of something else. Thanks in advance.
... View more